Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File: OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier: 4zbHO4X1h401I76EHLfceRv0aUIL6/6IDom/9mNeAAE=
Subject key identifier: A1:7E:FB:9A:F7:70:B0:31:35:DF:5C:DC:9F:74:9A:34:BF:FF:89:CD
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer: /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial: 0198D66111910C4ACC7FCA5EC24B2268A566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number: 069C
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: LpwZde8Tu3oETYjXb9NtWMd3iNd7YS2Aa0WHqDM7FTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:11:91:0c:4a:cc:7f:ca:5e:c2:4b:22:68:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=a17efb9af770b03135df5cdc9f749a34bfff89cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:09:c1:08:34:e0:18:c1:1e:41:5a:8b:c8:
ac:40:6d:fb:72:c7:a6:3c:86:d0:01:84:96:ce:e9:
e4:5a:e4:82:4f:93:1d:dd:7e:dc:b7:50:14:36:f8:
12:78:22:2b:e5:f1:e9:74:de:f7:4a:21:e1:17:0d:
ab:c8:37:89:eb:e6:eb:af:48:9b:d4:64:73:b8:90:
6c:c0:08:46:9a:95:44:f2:35:b4:8f:4d:64:6e:a1:
c8:0d:0d:0d:7d:a2:a8:23:49:b2:f4:42:04:8e:d8:
2e:06:5f:21:04:d1:4e:77:6b:e2:92:4a:39:f1:b3:
41:b4:e4:af:1f:39:b1:b5:40:92:14:18:0e:d6:33:
9b:bd:00:96:e3:0d:e5:f7:ac:bc:43:38:51:11:1e:
33:92:dd:c7:e0:3e:c1:41:45:2b:c3:72:a9:ab:59:
3d:f9:d5:8c:6b:1c:79:35:0a:1a:a5:87:ec:e1:31:
02:b9:06:5b:8c:84:d1:7d:4e:d7:58:73:98:46:00:
fb:aa:1e:dc:eb:34:6c:5c:9c:14:20:43:30:58:9c:
89:de:35:ee:5d:75:a1:8e:9d:2a:71:b0:e4:3f:7d:
ea:8a:37:30:c7:8c:29:29:17:d4:7e:42:79:64:8b:
f0:df:09:20:30:a7:09:f6:ff:82:df:90:b1:ab:59:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:FB:9A:F7:70:B0:31:35:DF:5C:DC:9F:74:9A:34:BF:FF:89:CD
X509v3 Authority Key Identifier:
keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:b6:80:70:2f:39:0c:49:d1:ff:c2:b2:4e:ba:81:9d:d0:
40:cb:7b:7b:d5:73:2f:4e:23:98:22:52:9c:3f:25:2e:d2:c0:
67:ab:05:fa:65:61:52:dd:b1:ad:f2:b0:f3:3a:39:9f:2c:22:
68:8d:31:7e:3e:f8:2a:5c:a7:81:ae:02:81:39:69:f2:b0:02:
d9:38:fd:06:11:80:ec:d3:a3:eb:54:39:c8:73:eb:75:96:f0:
d0:73:00:34:db:57:36:26:9c:1c:58:4a:80:dd:81:59:2f:4e:
61:f4:cb:07:17:3c:8c:27:12:be:14:5d:c6:b9:75:c6:d5:5b:
a8:31:de:78:af:f1:fb:63:a6:b4:7b:61:51:c4:d5:0e:33:47:
62:28:a7:96:64:74:e4:27:37:2c:90:cf:8e:4f:a6:41:62:32:
4f:9d:9a:9d:0d:70:52:91:99:76:f7:cb:a5:88:20:8f:6a:a0:
9a:e7:b1:69:eb:ff:51:e4:26:90:88:9d:ad:38:02:53:c1:56:
f8:a5:79:aa:2a:f0:cb:59:f3:02:cb:64:a3:d7:4e:02:a6:12:
ff:d8:42:98:49:a7:bf:55:5b:ca:c4:3c:41:ab:46:93:57:a3:
d8:7c:5a:56:38:0e:19:f0:61:99:42:24:e1:72:ba:d4:79:05:
42:48:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:19 2025 by rpki-client